does gfycat support CORS?

if not, can it?

people freak out like crazy when the Chrome permissions dialog comes up.

At the very least, we should make this an optional permission like twitter so the box only pops up when people try and use this.

with CORS support - we don't need permissions in the manifest.